@lssm/lib.contracts 1.11.0 → 1.41.0

package/dist/server/rest-generic.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"rest-generic.js","names":["h: Record<string, string>","opts: Required<Omit<RestOptions, 'onError'>> &\n    Pick<RestOptions, 'onError'>","routes: Route[]","base: HeadersInit","headers: HeadersInit","input: any","obj: Record<string, any>","err: any","headers"],"sources":["../../src/server/rest-generic.ts"],"sourcesContent":["import { defaultRestPath } from '../jsonschema';\nimport type { SpecRegistry } from '../registry';\nimport type { HandlerCtx } from '../types';\n\nexport interface RestOptions {\n  /** Prefix all routes, e.g. \"/api\" */\n  basePath?: string;\n  /** If true, handle OPTIONS and set CORS headers */\n  cors?:\n    | boolean\n    | {\n        origin?: string | '*';\n        methods?: string[];\n        headers?: string[];\n        credentials?: boolean;\n        maxAge?: number;\n      };\n  /** JSON spacing in responses (dev only ideally) */\n  prettyJson?: number | false;\n  /** Map thrown errors to {status, body} */\n  onError?: (err: unknown) => { status: number; body: any };\n}\n\n/** Minimal WHATWG Response polyfill util for Node < 18 (if needed) */\n// export const toResponse = (status: number, data: any, headers?: HeadersInit) =>\n//   new Response(JSON.stringify(data), { status, headers: { \"content-type\": \"application/json; charset=utf-8\", ...(headers || {}) } });\n\nfunction corsHeaders(opt: NonNullable<RestOptions['cors']>) {\n  const h: Record<string, string> = {};\n  const origin = typeof opt === 'object' ? (opt.origin ?? '*') : '*';\n  h['access-control-allow-origin'] = origin as string;\n  h['vary'] = 'Origin';\n  if (typeof opt === 'object') {\n    if (opt.methods) h['access-control-allow-methods'] = opt.methods.join(', ');\n    if (opt.headers) h['access-control-allow-headers'] = opt.headers.join(', ');\n    if (opt.credentials) h['access-control-allow-credentials'] = 'true';\n    if (typeof opt.maxAge === 'number')\n      h['access-control-max-age'] = String(opt.maxAge);\n  } else {\n    h['access-control-allow-methods'] = 'GET,POST,OPTIONS';\n    h['access-control-allow-headers'] =\n      'content-type,x-idempotency-key,x-trace-id';\n  }\n  return h;\n}\n\nfunction joinPath(a: string | undefined, b: string) {\n  const left = (a ?? '').replace(/\\/+$/g, '');\n  const right = b.replace(/^\\/+/g, '');\n  return `${left}/${right}`.replace(/\\/{2,}/g, '/');\n}\n\n/**\n * Build a single Fetch-style handler: (req) => Response\n * - Discovers routes from SpecRegistry\n * - Validates with zod via registry.execute()\n * - Handles CORS (optional)\n */\nexport function createFetchHandler(\n  reg: SpecRegistry,\n  ctxFactory: (req: Request) => HandlerCtx,\n  options?: RestOptions\n) {\n  const opts: Required<Omit<RestOptions, 'onError'>> &\n    Pick<RestOptions, 'onError'> = {\n    basePath: options?.basePath ?? '',\n    cors: options?.cors ?? false,\n    prettyJson: options?.prettyJson ?? false,\n    onError: options?.onError,\n  };\n\n  interface Route {\n    method: 'GET' | 'POST';\n    path: string; // absolute path including basePath\n    name: string;\n    version: number;\n  }\n\n  const routes: Route[] = reg.listSpecs().map((spec) => ({\n    method: (spec.transport?.rest?.method ??\n      (spec.meta.kind === 'query' ? 'GET' : 'POST')) as 'GET' | 'POST',\n    path: joinPath(\n      opts.basePath,\n      spec.transport?.rest?.path ??\n        defaultRestPath(spec.meta.name, spec.meta.version)\n    ),\n    name: spec.meta.name,\n    version: spec.meta.version,\n  }));\n\n  const routeTable = new Map<string, Route>(); // KEY: METHOD + \" \" + PATH\n  for (const r of routes) routeTable.set(`${r.method} ${r.path}`, r);\n\n  const allowHeader = Array.from(new Set(routes.map((r) => r.method))).join(\n    ', '\n  );\n\n  const makeJson = (status: number, data: any, extraHeaders?: HeadersInit) => {\n    const body = opts.prettyJson\n      ? JSON.stringify(data, null, opts.prettyJson)\n      : JSON.stringify(data);\n    const base: HeadersInit = {\n      'content-type': 'application/json; charset=utf-8',\n    };\n    return new Response(body, {\n      status,\n      headers: extraHeaders ? { ...base, ...extraHeaders } : base,\n    });\n  };\n\n  return async function handle(req: Request): Promise<Response> {\n    const url = new URL(req.url);\n    const key = `${req.method.toUpperCase()} ${url.pathname}`;\n\n    // CORS preflight\n    if (opts.cors && req.method.toUpperCase() === 'OPTIONS') {\n      const h = corsHeaders(opts.cors === true ? {} : opts.cors);\n      return new Response(null, {\n        status: 204,\n        headers: { ...h, 'content-length': '0' },\n      });\n    }\n\n    const route = routeTable.get(key);\n    if (!route) {\n      const headers: HeadersInit = {};\n      if (opts.cors)\n        Object.assign(\n          headers,\n          corsHeaders(opts.cors === true ? {} : opts.cors)\n        );\n      return makeJson(404, { error: 'NotFound', path: url.pathname }, headers);\n    }\n\n    try {\n      let input: any = {};\n      if (route.method === 'GET') {\n        // Support either flattened query (?a=1&b=x) or ?input=<json>\n        if (url.searchParams.has('input')) {\n          const raw = url.searchParams.get('input')!;\n          input = raw ? JSON.parse(raw) : {};\n        } else {\n          const obj: Record<string, any> = {};\n          for (const [k, v] of url.searchParams.entries()) obj[k] = v;\n          input = obj;\n        }\n      } else {\n        const contentType = req.headers.get('content-type') || '';\n        if (contentType.includes('application/json')) {\n          input = await req.json();\n        } else if (contentType.includes('application/x-www-form-urlencoded')) {\n          const form = (await req.formData()) as never as FormData;\n          input = Object.fromEntries(form.entries());\n        } else if (!contentType) {\n          input = {};\n        } else {\n          return makeJson(415, { error: 'UnsupportedMediaType', contentType });\n        }\n      }\n\n      const ctx = ctxFactory(req);\n      const result = await reg.execute(route.name, route.version, input, ctx);\n\n      const headers: HeadersInit = {};\n      if (opts.cors)\n        Object.assign(\n          headers,\n          corsHeaders(opts.cors === true ? {} : opts.cors)\n        );\n      return makeJson(200, result, headers);\n    } catch (err: any) {\n      if (opts.onError) {\n        const mapped = opts.onError(err);\n        const headers: HeadersInit = {};\n        if (opts.cors)\n          Object.assign(\n            headers,\n            corsHeaders(opts.cors === true ? {} : opts.cors)\n          );\n        return makeJson(mapped.status, mapped.body, headers);\n      }\n      const headers: HeadersInit = {};\n      if (opts.cors)\n        Object.assign(\n          headers,\n          corsHeaders(opts.cors === true ? {} : opts.cors)\n        );\n      // Basic zod hint\n      if (err?.issues)\n        return makeJson(\n          400,\n          { error: 'ValidationError', issues: err.issues },\n          headers\n        );\n      if (\n        typeof err?.message === 'string' &&\n        err.message.startsWith('PolicyDenied')\n      ) {\n        return makeJson(403, { error: 'PolicyDenied' }, headers);\n      }\n      return makeJson(500, { error: 'InternalError' }, headers);\n    }\n  };\n}\n"],"mappings":"mDA2BA,SAAS,EAAY,EAAuC,CAC1D,IAAMA,EAA4B,EAAE,CAepC,MAbA,GAAE,+BADa,OAAO,GAAQ,SAAY,EAAI,QAAU,IAAO,IAE/D,EAAE,KAAU,SACR,OAAO,GAAQ,UACb,EAAI,UAAS,EAAE,gCAAkC,EAAI,QAAQ,KAAK,KAAK,EACvE,EAAI,UAAS,EAAE,gCAAkC,EAAI,QAAQ,KAAK,KAAK,EACvE,EAAI,cAAa,EAAE,oCAAsC,QACzD,OAAO,EAAI,QAAW,WACxB,EAAE,0BAA4B,OAAO,EAAI,OAAO,IAElD,EAAE,gCAAkC,mBACpC,EAAE,gCACA,6CAEG,EAGT,SAAS,EAAS,EAAuB,EAAW,CAGlD,MAAO,IAFO,GAAK,IAAI,QAAQ,QAAS,GAAG,CAE5B,GADD,EAAE,QAAQ,QAAS,GAAG,GACV,QAAQ,UAAW,IAAI,CASnD,SAAgB,EACd,EACA,EACA,EACA,CACA,IAAMC,EAC2B,CAC/B,SAAU,GAAS,UAAY,GAC/B,KAAM,GAAS,MAAQ,GACvB,WAAY,GAAS,YAAc,GACnC,QAAS,GAAS,QACnB,CASKC,EAAkB,EAAI,WAAW,CAAC,IAAK,IAAU,CACrD,OAAS,EAAK,WAAW,MAAM,SAC5B,EAAK,KAAK,OAAS,QAAU,MAAQ,QACxC,KAAM,EACJ,EAAK,SACL,EAAK,WAAW,MAAM,MACpB,EAAgB,EAAK,KAAK,KAAM,EAAK,KAAK,QAAQ,CACrD,CACD,KAAM,EAAK,KAAK,KAChB,QAAS,EAAK,KAAK,QACpB,EAAE,CAEG,EAAa,IAAI,IACvB,IAAK,IAAM,KAAK,EAAQ,EAAW,IAAI,GAAG,EAAE,OAAO,GAAG,EAAE,OAAQ,EAAE,CAE9C,MAAM,KAAK,IAAI,IAAI,EAAO,IAAK,GAAM,EAAE,OAAO,CAAC,CAAC,CAAC,KACnE,KACD,CAED,IAAM,GAAY,EAAgB,EAAW,IAA+B,CAC1E,IAAM,EAAO,EAAK,WACd,KAAK,UAAU,EAAM,KAAM,EAAK,WAAW,CAC3C,KAAK,UAAU,EAAK,CAClBC,EAAoB,CACxB,eAAgB,kCACjB,CACD,OAAO,IAAI,SAAS,EAAM,CACxB,SACA,QAAS,EAAe,CAAE,GAAG,EAAM,GAAG,EAAc,CAAG,EACxD,CAAC,EAGJ,OAAO,eAAsB,EAAiC,CAC5D,IAAM,EAAM,IAAI,IAAI,EAAI,IAAI,CACtB,EAAM,GAAG,EAAI,OAAO,aAAa,CAAC,GAAG,EAAI,WAG/C,GAAI,EAAK,MAAQ,EAAI,OAAO,aAAa,GAAK,UAAW,CACvD,IAAM,EAAI,EAAY,EAAK,OAAS,GAAO,EAAE,CAAG,EAAK,KAAK,CAC1D,OAAO,IAAI,SAAS,KAAM,CACxB,OAAQ,IACR,QAAS,CAAE,GAAG,EAAG,iBAAkB,IAAK,CACzC,CAAC,CAGJ,IAAM,EAAQ,EAAW,IAAI,EAAI,CACjC,GAAI,CAAC,EAAO,CACV,IAAMC,EAAuB,EAAE,CAM/B,OALI,EAAK,MACP,OAAO,OACL,EACA,EAAY,EAAK,OAAS,GAAO,EAAE,CAAG,EAAK,KAAK,CACjD,CACI,EAAS,IAAK,CAAE,MAAO,WAAY,KAAM,EAAI,SAAU,CAAE,EAAQ,CAG1E,GAAI,CACF,IAAIC,EAAa,EAAE,CACnB,GAAI,EAAM,SAAW,MAEnB,GAAI,EAAI,aAAa,IAAI,QAAQ,CAAE,CACjC,IAAM,EAAM,EAAI,aAAa,IAAI,QAAQ,CACzC,EAAQ,EAAM,KAAK,MAAM,EAAI,CAAG,EAAE,KAC7B,CACL,IAAMC,EAA2B,EAAE,CACnC,IAAK,GAAM,CAAC,EAAG,KAAM,EAAI,aAAa,SAAS,CAAE,EAAI,GAAK,EAC1D,EAAQ,MAEL,CACL,IAAM,EAAc,EAAI,QAAQ,IAAI,eAAe,EAAI,GACvD,GAAI,EAAY,SAAS,mBAAmB,CAC1C,EAAQ,MAAM,EAAI,MAAM,SACf,EAAY,SAAS,oCAAoC,CAAE,CACpE,IAAM,EAAQ,MAAM,EAAI,UAAU,CAClC,EAAQ,OAAO,YAAY,EAAK,SAAS,CAAC,SACjC,CAAC,EACV,EAAQ,EAAE,MAEV,OAAO,EAAS,IAAK,CAAE,MAAO,uBAAwB,cAAa,CAAC,CAIxE,IAAM,EAAM,EAAW,EAAI,CACrB,EAAS,MAAM,EAAI,QAAQ,EAAM,KAAM,EAAM,QAAS,EAAO,EAAI,CAEjEF,EAAuB,EAAE,CAM/B,OALI,EAAK,MACP,OAAO,OACL,EACA,EAAY,EAAK,OAAS,GAAO,EAAE,CAAG,EAAK,KAAK,CACjD,CACI,EAAS,IAAK,EAAQ,EAAQ,OAC9BG,EAAU,CACjB,GAAI,EAAK,QAAS,CAChB,IAAM,EAAS,EAAK,QAAQ,EAAI,CAC1BH,EAAuB,EAAE,CAM/B,OALI,EAAK,MACP,OAAO,OACLI,EACA,EAAY,EAAK,OAAS,GAAO,EAAE,CAAG,EAAK,KAAK,CACjD,CACI,EAAS,EAAO,OAAQ,EAAO,KAAMA,EAAQ,CAEtD,IAAMJ,EAAuB,EAAE,CAmB/B,OAlBI,EAAK,MACP,OAAO,OACL,EACA,EAAY,EAAK,OAAS,GAAO,EAAE,CAAG,EAAK,KAAK,CACjD,CAEC,GAAK,OACA,EACL,IACA,CAAE,MAAO,kBAAmB,OAAQ,EAAI,OAAQ,CAChD,EACD,CAED,OAAO,GAAK,SAAY,UACxB,EAAI,QAAQ,WAAW,eAAe,CAE/B,EAAS,IAAK,CAAE,MAAO,eAAgB,CAAE,EAAQ,CAEnD,EAAS,IAAK,CAAE,MAAO,gBAAiB,CAAE,EAAQ"}

package/dist/server/rest-next-app.d.ts

@@ -1,36 +0,0 @@
-import { HandlerCtx } from "../types.js";
-import { SpecRegistry } from "../registry.js";
-import { RestOptions } from "./rest-generic.js";
-
-//#region src/server/rest-next-app.d.ts
-
-/**
- * Creates a Next.js App Router route handler for ContractSpec operations.
- *
- * This function returns a handler suitable for `export const { GET, POST }` in a `route.ts` file.
- * It handles:
- * - Path parsing to determine the operation name and version.
- * - Body parsing (JSON).
- * - Context creation via `ctxFactory`.
- * - Execution via `SpecRegistry`.
- * - Response formatting (JSON success/error).
- *
- * @param reg - The SpecRegistry containing the operations.
- * @param ctxFactory - A factory function to build the `HandlerCtx` (e.g., auth, tenant) from the request.
- * @param options - Optional configuration for the REST handler.
- * @returns A function `(req: Request) => Promise<Response>`.
- *
- * @example
- * ```ts
- * // app/api/[...route]/route.ts
- * import { makeNextAppHandler } from '@lssm/lib.contracts/server/rest-next-app';
- * import { registry } from '@/lib/registry';
- *
- * const handler = makeNextAppHandler(registry, (req) => ({ actor: 'anonymous' }));
- * export { handler as GET, handler as POST };
- * ```
- */
-declare function makeNextAppHandler(reg: SpecRegistry, ctxFactory: (req: Request) => HandlerCtx, options?: RestOptions): (req: Request) => Promise<Response>;
-//#endregion
-export { makeNextAppHandler };
-//# sourceMappingURL=rest-next-app.d.ts.map

package/dist/server/rest-next-app.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"rest-next-app.d.ts","names":[],"sources":["../../src/server/rest-next-app.ts"],"sourcesContent":[],"mappings":";;;;;;;;AA8BA;;;;;;;;;;;;;;;;;;;;;;;;iBAAgB,kBAAA,MACT,gCACa,YAAY,sBACpB,oBAGgC,YAAO,QAAA"}

package/dist/server/rest-next-app.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"rest-next-app.js","names":[],"sources":["../../src/server/rest-next-app.ts"],"sourcesContent":["import { createFetchHandler, type RestOptions } from './rest-generic';\nimport type { SpecRegistry } from '../registry';\nimport type { HandlerCtx } from '../types';\n\n/**\n * Creates a Next.js App Router route handler for ContractSpec operations.\n *\n * This function returns a handler suitable for `export const { GET, POST }` in a `route.ts` file.\n * It handles:\n * - Path parsing to determine the operation name and version.\n * - Body parsing (JSON).\n * - Context creation via `ctxFactory`.\n * - Execution via `SpecRegistry`.\n * - Response formatting (JSON success/error).\n *\n * @param reg - The SpecRegistry containing the operations.\n * @param ctxFactory - A factory function to build the `HandlerCtx` (e.g., auth, tenant) from the request.\n * @param options - Optional configuration for the REST handler.\n * @returns A function `(req: Request) => Promise<Response>`.\n *\n * @example\n * ```ts\n * // app/api/[...route]/route.ts\n * import { makeNextAppHandler } from '@lssm/lib.contracts/server/rest-next-app';\n * import { registry } from '@/lib/registry';\n *\n * const handler = makeNextAppHandler(registry, (req) => ({ actor: 'anonymous' }));\n * export { handler as GET, handler as POST };\n * ```\n */\nexport function makeNextAppHandler(\n  reg: SpecRegistry,\n  ctxFactory: (req: Request) => HandlerCtx,\n  options?: RestOptions\n) {\n  const handler = createFetchHandler(reg, ctxFactory, options);\n  return async function requestHandler(req: Request) {\n    return handler(req);\n  };\n}\n"],"mappings":"uDA8BA,SAAgB,EACd,EACA,EACA,EACA,CACA,IAAM,EAAU,EAAmB,EAAK,EAAY,EAAQ,CAC5D,OAAO,eAA8B,EAAc,CACjD,OAAO,EAAQ,EAAI"}

package/dist/server/rest-next-mcp.d.ts

@@ -1,12 +0,0 @@
-import { HandlerCtx } from "../types.js";
-import { SpecRegistry } from "../registry.js";
-
-//#region src/server/rest-next-mcp.d.ts
-declare function makeNextMcpServerFromRegistry(reg: SpecRegistry, ctxFactory: () => HandlerCtx): {
-  GET: (request: Request) => Promise<Response>;
-  POST: (request: Request) => Promise<Response>;
-  DELETE: (request: Request) => Promise<Response>;
-};
-//#endregion
-export { makeNextMcpServerFromRegistry };
-//# sourceMappingURL=rest-next-mcp.d.ts.map

package/dist/server/rest-next-mcp.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"rest-next-mcp.d.ts","names":[],"sources":["../../src/server/rest-next-mcp.ts"],"sourcesContent":[],"mappings":";;;;iBAYgB,6BAAA,MACT,gCACa;;EAFJ,IAAA,EAAA,CAAA,OAAA,SAAA,EAAA,UAA6B,SAAA,CAAA;EACtC,MAAA,EAAA,CAAA,OAAA,SAAA,EAAA,UAAA,SAAA,CAAA;CACa"}

package/dist/server/rest-next-mcp.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"rest-next-mcp.js","names":[],"sources":["../../src/server/rest-next-mcp.ts"],"sourcesContent":["import type { SpecRegistry } from '../registry';\nimport type { AnySchemaModel } from '@lssm/lib.schema';\nimport type { ContractSpec } from '../spec';\nimport type { HandlerCtx } from '../types';\nimport { createMcpHandler } from 'mcp-handler';\nimport type {\n  ReadResourceTemplateCallback,\n  ToolCallback,\n} from '@modelcontextprotocol/sdk/server/mcp.js';\nimport { ResourceTemplate } from '@modelcontextprotocol/sdk/server/mcp.js';\nimport { defaultMcpTool, jsonSchemaForSpec } from '../jsonschema';\n\nexport function makeNextMcpServerFromRegistry(\n  reg: SpecRegistry,\n  ctxFactory: () => HandlerCtx\n) {\n  const handler = createMcpHandler(\n    (server) => {\n      for (const spec of reg.listSpecs()) {\n        const { input, output, meta } = jsonSchemaForSpec(\n          spec as unknown as ContractSpec<AnySchemaModel, AnySchemaModel>\n        );\n\n        if (meta.kind === 'query') {\n          const resourceName =\n            spec.transport?.mcp?.toolName ??\n            defaultMcpTool(spec.meta.name, spec.meta.version);\n\n          (server as any).registerResource(\n            resourceName,\n            new ResourceTemplate('users://{userId}/profile', {\n              list: undefined,\n            }),\n            {\n              // name: resourceName,\n              description: spec.meta.description,\n              inputSchema: input,\n            },\n            (async (uri: URL, args, _req) => {\n              const result = await reg.execute(\n                spec.meta.name,\n                spec.meta.version,\n                args ?? {},\n                ctxFactory()\n              );\n              // return { content: [{ type: 'json', json: result }] };\n              return { contents: [{ uri: uri.href, text: String(result) }] };\n            }) as ReadResourceTemplateCallback\n          );\n        } else if (meta.kind === 'command') {\n          const toolName =\n            spec.transport?.mcp?.toolName ??\n            defaultMcpTool(spec.meta.name, spec.meta.version);\n\n          server.registerTool(\n            toolName,\n            {\n              // name: toolName,\n              description: spec.meta.description,\n              inputSchema: input as any,\n            },\n            (async (args: any, _req: any) => {\n              const result = await reg.execute(\n                spec.meta.name,\n                spec.meta.version,\n                args ?? {},\n                ctxFactory()\n              );\n              // return { content: [{ type: 'json', json: result }] };\n              return { content: [{ type: 'text', text: String(result) }] };\n            }) as ToolCallback\n          );\n        } else {\n          throw new Error(`Unsupported kind: ${meta.kind}`);\n        }\n      }\n    },\n    {},\n    { basePath: '/api' }\n  );\n\n  return { GET: handler, POST: handler, DELETE: handler };\n}\n"],"mappings":"mMAYA,SAAgB,EACd,EACA,EACA,CACA,IAAM,EAAU,EACb,GAAW,CACV,IAAK,IAAM,KAAQ,EAAI,WAAW,CAAE,CAClC,GAAM,CAAE,QAAO,SAAQ,QAAS,EAC9B,EACD,CAED,GAAI,EAAK,OAAS,QAAS,CACzB,IAAM,EACJ,EAAK,WAAW,KAAK,UACrB,EAAe,EAAK,KAAK,KAAM,EAAK,KAAK,QAAQ,CAElD,EAAe,iBACd,EACA,IAAI,EAAiB,2BAA4B,CAC/C,KAAM,IAAA,GACP,CAAC,CACF,CAEE,YAAa,EAAK,KAAK,YACvB,YAAa,EACd,EACA,MAAO,EAAU,EAAM,IAAS,CAC/B,IAAM,EAAS,MAAM,EAAI,QACvB,EAAK,KAAK,KACV,EAAK,KAAK,QACV,GAAQ,EAAE,CACV,GAAY,CACb,CAED,MAAO,CAAE,SAAU,CAAC,CAAE,IAAK,EAAI,KAAM,KAAM,OAAO,EAAO,CAAE,CAAC,CAAE,GAEjE,SACQ,EAAK,OAAS,UAAW,CAClC,IAAM,EACJ,EAAK,WAAW,KAAK,UACrB,EAAe,EAAK,KAAK,KAAM,EAAK,KAAK,QAAQ,CAEnD,EAAO,aACL,EACA,CAEE,YAAa,EAAK,KAAK,YACvB,YAAa,EACd,EACA,MAAO,EAAW,IAAc,CAC/B,IAAM,EAAS,MAAM,EAAI,QACvB,EAAK,KAAK,KACV,EAAK,KAAK,QACV,GAAQ,EAAE,CACV,GAAY,CACb,CAED,MAAO,CAAE,QAAS,CAAC,CAAE,KAAM,OAAQ,KAAM,OAAO,EAAO,CAAE,CAAC,CAAE,GAE/D,MAED,MAAU,MAAM,qBAAqB,EAAK,OAAO,GAIvD,EAAE,CACF,CAAE,SAAU,OAAQ,CACrB,CAED,MAAO,CAAE,IAAK,EAAS,KAAM,EAAS,OAAQ,EAAS"}

package/dist/server/rest-next-pages.d.ts

@@ -1,10 +0,0 @@
-import { HandlerCtx } from "../types.js";
-import { SpecRegistry } from "../registry.js";
-import { RestOptions } from "./rest-generic.js";
-import { NextApiRequest, NextApiResponse } from "next";
-
-//#region src/server/rest-next-pages.d.ts
-declare function makeNextPagesHandler(reg: SpecRegistry, ctxFactory: (req: NextApiRequest) => HandlerCtx, options?: RestOptions): (req: NextApiRequest, res: NextApiResponse) => Promise<void>;
-//#endregion
-export { makeNextPagesHandler };
-//# sourceMappingURL=rest-next-pages.d.ts.map

package/dist/server/rest-next-pages.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"rest-next-pages.d.ts","names":[],"sources":["../../src/server/rest-next-pages.ts"],"sourcesContent":[],"mappings":";;;;;;iBAKgB,oBAAA,MACT,gCACa,mBAAmB,sBAC3B,oBAUyB,qBAAqB,oBAAe"}

package/dist/server/rest-next-pages.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"rest-next-pages.js","names":[],"sources":["../../src/server/rest-next-pages.ts"],"sourcesContent":["import type { NextApiRequest, NextApiResponse } from 'next';\nimport { createFetchHandler, type RestOptions } from './rest-generic';\nimport type { SpecRegistry } from '../registry';\nimport type { HandlerCtx } from '../types';\n\nexport function makeNextPagesHandler(\n  reg: SpecRegistry,\n  ctxFactory: (req: NextApiRequest) => HandlerCtx,\n  options?: RestOptions\n) {\n  const fetchHandler = createFetchHandler(\n    reg,\n    (_req: Request) => {\n      throw new Error('Use per-request wrapper'); // we wrap below\n    },\n    options\n  );\n\n  return async function handler(req: NextApiRequest, res: NextApiResponse) {\n    const url = `${req.headers['x-forwarded-proto'] ?? 'http'}://${req.headers.host}${req.url}`;\n    const method = req.method?.toUpperCase() || 'GET';\n\n    const request = new Request(url, {\n      method,\n      headers: Object.fromEntries(\n        Object.entries(req.headers).map(([k, v]) => [k, String(v)])\n      ),\n      body: method === 'POST' ? JSON.stringify(req.body ?? {}) : undefined,\n    });\n\n    const perReqHandler = createFetchHandler(\n      reg,\n      () => ctxFactory(req),\n      options\n    );\n    const response = await perReqHandler(request);\n\n    res.status(response.status);\n    response.headers.forEach((v, k) => res.setHeader(k, v));\n    const text = await response.text();\n    res.send(text);\n  };\n}\n"],"mappings":"uDAKA,SAAgB,EACd,EACA,EACA,EACA,CASA,OARqB,EACnB,EACC,GAAkB,CACjB,MAAU,MAAM,0BAA0B,EAE5C,EACD,CAEM,eAAuB,EAAqB,EAAsB,CACvE,IAAM,EAAM,GAAG,EAAI,QAAQ,sBAAwB,OAAO,KAAK,EAAI,QAAQ,OAAO,EAAI,MAChF,EAAS,EAAI,QAAQ,aAAa,EAAI,MAEtC,EAAU,IAAI,QAAQ,EAAK,CAC/B,SACA,QAAS,OAAO,YACd,OAAO,QAAQ,EAAI,QAAQ,CAAC,KAAK,CAAC,EAAG,KAAO,CAAC,EAAG,OAAO,EAAE,CAAC,CAAC,CAC5D,CACD,KAAM,IAAW,OAAS,KAAK,UAAU,EAAI,MAAQ,EAAE,CAAC,CAAG,IAAA,GAC5D,CAAC,CAOI,EAAW,MALK,EACpB,MACM,EAAW,EAAI,CACrB,EACD,CACoC,EAAQ,CAE7C,EAAI,OAAO,EAAS,OAAO,CAC3B,EAAS,QAAQ,SAAS,EAAG,IAAM,EAAI,UAAU,EAAG,EAAE,CAAC,CACvD,IAAM,EAAO,MAAM,EAAS,MAAM,CAClC,EAAI,KAAK,EAAK"}

package/dist/spec.d.ts

@@ -1,172 +0,0 @@
-import { Owner, Stability, Tag } from "./ownership.js";
-import { EventSpec } from "./events.js";
-import { ResourceRefDescriptor } from "./resources.js";
-import { PolicyRef } from "./policy/spec.js";
-import { TestSpecRef } from "./tests/spec.js";
-import { AnySchemaModel } from "@lssm/lib.schema";
-
-//#region src/spec.d.ts
-
-/**
- * Distinguishes between state-changing operations (command) and read-only operations (query).
- */
-type OpKind = 'command' | 'query';
-interface EmitDeclRef {
-  ref: EventSpec<AnySchemaModel>;
-  when: string;
-}
-interface EmitDeclInline {
-  name: string;
-  version: number;
-  when: string;
-  payload: AnySchemaModel;
-}
-/**
- * Declaration of an event that an operation may emit.
- * Can be a reference to an `EventSpec` or an inline definition.
- */
-type EmitDecl = EmitDeclRef | EmitDeclInline;
-declare const isEmitDeclRef: (e: EmitDecl) => e is EmitDeclRef;
-interface TelemetryTrigger {
-  event: {
-    name: string;
-    version?: number;
-  };
-  properties?: (args: {
-    input: unknown;
-    output?: unknown;
-    error?: unknown;
-  }) => Record<string, unknown>;
-}
-/**
- * The core specification interface for any operation (Command or Query).
- *
- * @template Input - The Zod-backed schema model for the input payload.
- * @template Output - The Zod-backed schema model for the output payload, or a resource reference.
- * @template Events - Tuple of events that this operation may emit.
- */
-interface ContractSpec<Input extends AnySchemaModel, Output extends AnySchemaModel | ResourceRefDescriptor<boolean>, Events extends readonly EmitDecl[] | undefined = readonly EmitDecl[] | undefined> {
-  meta: {
-    /** Fully-qualified op name (e.g., "sigil.beginSignup") */
-    name: string;
-    /** Breaking changes => bump version */
-    version: number;
-    /** "command" changes state; "query" is read-only/idempotent */
-    kind: OpKind;
-    /** Lifecycle marker for comms & tooling */
-    stability: Stability;
-    /** Owners for CODEOWNERS / on-call / approvals */
-    owners: Owner[];
-    /** Search tags, grouping, docs navigation */
-    tags: Tag[];
-    /** Short human-friendly summary */
-    description: string;
-    /** Business goal: why this exists */
-    goal: string;
-    /** Background, constraints, scope edges (feeds docs & LLM context) */
-    context: string;
-  };
-  io: {
-    /** Zod schema for input payload */
-    input: Input | null;
-    /** Zod schema for output payload */
-    output: Output;
-    /** Named, typed errors this op may throw (optional) */
-    errors?: Record<string, {
-      description: string;
-      http?: number;
-      gqlCode?: string;
-      when: string;
-    }>;
-  };
-  policy: {
-    /** Minimal auth category allowed to call this op */
-    auth: 'anonymous' | 'user' | 'admin';
-    /** Idempotency hint. Queries default true; commands default false. */
-    idempotent?: boolean;
-    /** Soft rate limit suggestion; adapter enforces via limiter */
-    rateLimit?: {
-      rpm: number;
-      key: 'user' | 'org' | 'global';
-    };
-    /** Feature flags that must be ON for this op to run */
-    flags?: string[];
-    /** Whether a human must approve before action (e.g., risky commands) */
-    escalate?: 'human_review' | null;
-    /** JSONPath-like pointers to redact from logs/prompts */
-    pii?: string[];
-    /** Referenced policy specs governing access */
-    policies?: PolicyRef[];
-    /** Field-level overrides referencing policy specs */
-    fieldPolicies?: {
-      field: string;
-      actions: ('read' | 'write')[];
-      policy?: PolicyRef;
-    }[];
-  };
-  sideEffects?: {
-    /** Declared events this op may emit; runtime will guard against others */
-    emits?: Events;
-    /** Analytics intents (names); the service decides the sink */
-    analytics?: string[];
-    /** Audit intents (labels); the service decides storage */
-    audit?: string[];
-  };
-  telemetry?: {
-    success?: TelemetryTrigger;
-    failure?: TelemetryTrigger;
-  };
-  tests?: TestSpecRef[];
-  transport?: {
-    rest?: {
-      /** Override HTTP method (default: POST for commands, GET for queries) */
-      method?: 'GET' | 'POST';
-      /** Override path (default derived from meta.name/version) */
-      path?: string;
-    };
-    gql?: {
-      /** Override field name (default: dots→underscores + _vN) */
-      field?: string;
-      returns?: string;
-    };
-    mcp?: {
-      /** Override tool identifier (default: "<name>.v<version>") */
-      toolName?: string;
-    };
-  };
-  acceptance?: {
-    /** Gherkin-lite scenarios for docs & auto tests */
-    scenarios?: {
-      name: string;
-      given: string[];
-      when: string[];
-      then: string[];
-    }[];
-    /** Request/response examples (used for docs & snapshot tests) */
-    examples?: {
-      name: string;
-      input: unknown;
-      output: unknown;
-    }[];
-  };
-}
-type AnyContractSpec = ContractSpec<AnySchemaModel, AnySchemaModel | ResourceRefDescriptor<boolean>>;
-/**
- * Helper to define a Command (write operation).
- * Sets `kind: 'command'` and defaults `idempotent: false`.
- */
-declare const defineCommand: <I extends AnySchemaModel, O extends AnySchemaModel | ResourceRefDescriptor<boolean>, E extends readonly EmitDecl[] | undefined = undefined>(spec: Omit<ContractSpec<I, O, E>, "meta" | "policy"> & {
-  meta: Omit<ContractSpec<I, O, E>["meta"], "kind">;
-  policy: Omit<ContractSpec<I, O, E>["policy"], "idempotent">;
-}) => ContractSpec<I, O, E>;
-/**
- * Helper to define a Query (read-only operation).
- * Sets `kind: 'query'` and forces `idempotent: true`.
- */
-declare const defineQuery: <I extends AnySchemaModel, O extends AnySchemaModel | ResourceRefDescriptor<boolean>, E extends readonly EmitDecl[] | undefined = undefined>(spec: Omit<ContractSpec<I, O, E>, "meta" | "policy"> & {
-  meta: Omit<ContractSpec<I, O, E>["meta"], "kind">;
-  policy: Omit<ContractSpec<I, O, E>["policy"], "idempotent">;
-}) => ContractSpec<I, O, E>;
-//#endregion
-export { AnyContractSpec, ContractSpec, EmitDecl, EmitDeclInline, EmitDeclRef, OpKind, TelemetryTrigger, defineCommand, defineQuery, isEmitDeclRef };
-//# sourceMappingURL=spec.d.ts.map

package/dist/spec.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"spec.d.ts","names":[],"sources":["../src/spec.ts"],"sourcesContent":[],"mappings":";;;;;;;;;AAsBA;AAUA;AACA;AAEiB,KArBL,MAAA,GAqBK,SAAgB,GAAA,OAMzB;AAUS,UAlCA,WAAA,CAkCY;EACb,GAAA,EAlCT,SAkCS,CAlCC,cAkCD,CAAA;EACC,IAAA,EAAA,MAAA;;AACS,UAhCT,cAAA,CAgCS;EACX,IAAA,EAAA,MAAA;EASL,OAAA,EAAA,MAAA;EAEK,IAAA,EAAA,MAAA;EAEH,OAAA,EA1CD,cA0CC;;;;;;AA+CG,KAnFH,QAAA,GAAW,WAmFR,GAnFsB,cAmFtB;AAMH,cAxFC,aAwFD,EAAA,CAAA,CAAA,EAxFqB,QAwFrB,EAAA,GAAA,CAAA,IAxFqC,WAwFrC;AAQE,UA9FG,gBAAA,CA8FH;EACA,KAAA,EAAA;IAGJ,IAAA,EAAA,MAAA;IAAW,OAAA,CAAA,EAAA,MAAA;EAmCT,CAAA;EACV,UAAA,CAAA,EAAA,CAAA,IAAA,EAAA;IACA,KAAA,EAAA,OAAA;IAAiB,MAAA,CAAA,EAAA,OAAA;IAFW,KAAA,CAAA,EAAA,OAAA;EAAY,CAAA,EAAA,GA/HlC,MA+HkC,CAAA,MAAA,EAAA,OAAA,CAAA;AAS1C;;;;;;;;AAKa,UAnII,YAmIJ,CAAA,cAlIG,cAkIH,EAAA,eAjII,cAiIJ,GAjIqB,qBAiIrB,CAAA,OAAA,CAAA,EAAA,eAAA,SAhIa,QAgIb,EAAA,GAAA,SAAA,GAAA,SA/HE,QA+HF,EAAA,GAAA,SAAA,CAAA,CAAA;EAAL,IAAA,EAAA;IACoB;IAAG,IAAA,EAAA,MAAA;IAAG;IAAnB,OAAA,EAAA,MAAA;IAAL;IACoB,IAAA,EAxHpB,MAwHoB;IAAG;IAAG,SAAA,EAtHrB,SAsHqB;IAAnB;IAAL,MAAA,EApHA,KAoHA,EAAA;IAEI;IAAG,IAAA,EApHT,GAoHS,EAAA;IAAG;IAAnB,WAAA,EAAA,MAAA;IAAY;IAeF,IAAA,EAAA,MAaX;IAZU;IACA,OAAA,EAAA,MAAA;EAAiB,CAAA;EACR,EAAA,EAAA;IAEK;IAAG,KAAA,EA7HlB,KA6HkB,GAAA,IAAA;IAAG;IAAnB,MAAA,EA3HD,MA2HC;IAAL;IACoB,MAAA,CAAA,EA1Hf,MA0He,CAAA,MAAA,EAAA;MAAG,WAAA,EAAA,MAAA;MAAG,IAAA,CAAA,EAAA,MAAA;MAAnB,OAAA,CAAA,EAAA,MAAA;MAAL,IAAA,EAAA,MAAA;IACoB,CAAA,CAAA;EAAG,CAAA;EAAG,MAAA,EAAA;IAAnB;IAAL,IAAA,EAAA,WAAA,GAAA,MAAA,GAAA,OAAA;IAEI;IAAG,UAAA,CAAA,EAAA,OAAA;IAAG;IAAnB,SAAA,CAAA,EAAA;MAAY,GAAA,EAAA,MAAA;;;;;;;;;;eApGA;;;;;eAKA;;;;;YAMH;;;;;;;cAQE;cACA;;UAGJ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;KAmCE,eAAA,GAAkB,aAC5B,gBACA,iBAAiB;;;;;cAON,0BACD,0BACA,iBAAiB,mDACR,0CAEb,KAAK,aAAa,GAAG,GAAG;QACtB,KAAK,aAAa,GAAG,GAAG;UACtB,KAAK,aAAa,GAAG,GAAG;MAEjC,aAAa,GAAG,GAAG;;;;;cAeT,wBACD,0BACA,iBAAiB,mDACR,0CAEb,KAAK,aAAa,GAAG,GAAG;QACtB,KAAK,aAAa,GAAG,GAAG;UACtB,KAAK,aAAa,GAAG,GAAG;MAEjC,aAAa,GAAG,GAAG"}

package/dist/spec.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"spec.js","names":[],"sources":["../src/spec.ts"],"sourcesContent":["/**\n * ContractSpec: a single source of truth describing one operation (command/query).\n * It carries narrative context for humans/agents AND machine-typed input/output/policy.\n */\nimport type { EventSpec } from './events';\nimport type { AnySchemaModel } from '@lssm/lib.schema';\nimport type { ResourceRefDescriptor } from './resources';\nimport type { Owner, Stability, Tag } from './ownership';\nimport type { PolicyRef } from './policy/spec';\nimport type { TestSpecRef } from './tests/spec';\n\n/**\n * Distinguishes between state-changing operations (command) and read-only operations (query).\n */\nexport type OpKind = 'command' | 'query';\n\n// preferred: reference a declared event\nexport interface EmitDeclRef {\n  ref: EventSpec<AnySchemaModel>;\n  when: string;\n}\n// inline (fallback)\nexport interface EmitDeclInline {\n  name: string;\n  version: number;\n  when: string;\n  payload: AnySchemaModel;\n}\n/**\n * Declaration of an event that an operation may emit.\n * Can be a reference to an `EventSpec` or an inline definition.\n */\nexport type EmitDecl = EmitDeclRef | EmitDeclInline;\nexport const isEmitDeclRef = (e: EmitDecl): e is EmitDeclRef => 'ref' in e;\n\nexport interface TelemetryTrigger {\n  event: { name: string; version?: number };\n  properties?: (args: {\n    input: unknown;\n    output?: unknown;\n    error?: unknown;\n  }) => Record<string, unknown>;\n}\n\n/**\n * The core specification interface for any operation (Command or Query).\n *\n * @template Input - The Zod-backed schema model for the input payload.\n * @template Output - The Zod-backed schema model for the output payload, or a resource reference.\n * @template Events - Tuple of events that this operation may emit.\n */\nexport interface ContractSpec<\n  Input extends AnySchemaModel,\n  Output extends AnySchemaModel | ResourceRefDescriptor<boolean>,\n  Events extends readonly EmitDecl[] | undefined =\n    | readonly EmitDecl[]\n    | undefined,\n> {\n  meta: {\n    /** Fully-qualified op name (e.g., \"sigil.beginSignup\") */\n    name: string;\n    /** Breaking changes => bump version */\n    version: number;\n    /** \"command\" changes state; \"query\" is read-only/idempotent */\n    kind: OpKind;\n    /** Lifecycle marker for comms & tooling */\n    stability: Stability;\n    /** Owners for CODEOWNERS / on-call / approvals */\n    owners: Owner[];\n    /** Search tags, grouping, docs navigation */\n    tags: Tag[];\n    /** Short human-friendly summary */\n    description: string;\n    /** Business goal: why this exists */\n    goal: string;\n    /** Background, constraints, scope edges (feeds docs & LLM context) */\n    context: string;\n  };\n\n  io: {\n    /** Zod schema for input payload */\n    input: Input | null;\n    /** Zod schema for output payload */\n    output: Output;\n    /** Named, typed errors this op may throw (optional) */\n    errors?: Record<\n      string,\n      {\n        description: string;\n        http?: number; // suggested HTTP status if surfaced over REST\n        gqlCode?: string; // suggested GraphQL error code\n        when: string; // human-readable condition\n      }\n    >;\n  };\n\n  policy: {\n    /** Minimal auth category allowed to call this op */\n    auth: 'anonymous' | 'user' | 'admin';\n    /** Idempotency hint. Queries default true; commands default false. */\n    idempotent?: boolean;\n    /** Soft rate limit suggestion; adapter enforces via limiter */\n    rateLimit?: { rpm: number; key: 'user' | 'org' | 'global' };\n    /** Feature flags that must be ON for this op to run */\n    flags?: string[];\n    /** Whether a human must approve before action (e.g., risky commands) */\n    escalate?: 'human_review' | null;\n    /** JSONPath-like pointers to redact from logs/prompts */\n    pii?: string[];\n    /** Referenced policy specs governing access */\n    policies?: PolicyRef[];\n    /** Field-level overrides referencing policy specs */\n    fieldPolicies?: {\n      field: string;\n      actions: ('read' | 'write')[];\n      policy?: PolicyRef;\n    }[];\n  };\n\n  sideEffects?: {\n    /** Declared events this op may emit; runtime will guard against others */\n    emits?: Events;\n    /** Analytics intents (names); the service decides the sink */\n    analytics?: string[];\n    /** Audit intents (labels); the service decides storage */\n    audit?: string[];\n  };\n\n  telemetry?: {\n    success?: TelemetryTrigger;\n    failure?: TelemetryTrigger;\n  };\n\n  tests?: TestSpecRef[];\n\n  transport?: {\n    rest?: {\n      /** Override HTTP method (default: POST for commands, GET for queries) */\n      method?: 'GET' | 'POST';\n      /** Override path (default derived from meta.name/version) */\n      path?: string;\n    };\n    gql?: {\n      /** Override field name (default: dots→underscores + _vN) */\n      field?: string;\n      returns?: string;\n      // byIdField?: string;\n      // resource?: string;\n    };\n    mcp?: {\n      /** Override tool identifier (default: \"<name>.v<version>\") */\n      toolName?: string;\n    };\n  };\n\n  acceptance?: {\n    /** Gherkin-lite scenarios for docs & auto tests */\n    scenarios?: {\n      name: string;\n      given: string[];\n      when: string[];\n      then: string[];\n    }[];\n    /** Request/response examples (used for docs & snapshot tests) */\n    examples?: { name: string; input: unknown; output: unknown }[];\n  };\n}\n\nexport type AnyContractSpec = ContractSpec<\n  AnySchemaModel,\n  AnySchemaModel | ResourceRefDescriptor<boolean>\n>;\n\n/**\n * Helper to define a Command (write operation).\n * Sets `kind: 'command'` and defaults `idempotent: false`.\n */\nexport const defineCommand = <\n  I extends AnySchemaModel,\n  O extends AnySchemaModel | ResourceRefDescriptor<boolean>,\n  E extends readonly EmitDecl[] | undefined = undefined,\n>(\n  spec: Omit<ContractSpec<I, O, E>, 'meta' | 'policy'> & {\n    meta: Omit<ContractSpec<I, O, E>['meta'], 'kind'>;\n    policy: Omit<ContractSpec<I, O, E>['policy'], 'idempotent'>;\n  }\n): ContractSpec<I, O, E> => ({\n  ...spec,\n  meta: { ...spec.meta, kind: 'command' as const },\n  policy: {\n    ...spec.policy,\n    idempotent:\n      (spec.policy as never as ContractSpec<never, never, never>)?.['policy']\n        ?.idempotent ?? false,\n  },\n});\n\n/**\n * Helper to define a Query (read-only operation).\n * Sets `kind: 'query'` and forces `idempotent: true`.\n */\nexport const defineQuery = <\n  I extends AnySchemaModel,\n  O extends AnySchemaModel | ResourceRefDescriptor<boolean>,\n  E extends readonly EmitDecl[] | undefined = undefined,\n>(\n  spec: Omit<ContractSpec<I, O, E>, 'meta' | 'policy'> & {\n    meta: Omit<ContractSpec<I, O, E>['meta'], 'kind'>;\n    policy: Omit<ContractSpec<I, O, E>['policy'], 'idempotent'>;\n  }\n): ContractSpec<I, O, E> => ({\n  ...spec,\n  meta: { ...spec.meta, kind: 'query' as const },\n  policy: { ...spec.policy, idempotent: true },\n});\n"],"mappings":"AAiCA,MAAa,EAAiB,GAAkC,QAAS,EAgJ5D,EAKX,IAI2B,CAC3B,GAAG,EACH,KAAM,CAAE,GAAG,EAAK,KAAM,KAAM,UAAoB,CAChD,OAAQ,CACN,GAAG,EAAK,OACR,WACG,EAAK,QAAwD,QAC1D,YAAc,GACrB,CACF,EAMY,EAKX,IAI2B,CAC3B,GAAG,EACH,KAAM,CAAE,GAAG,EAAK,KAAM,KAAM,QAAkB,CAC9C,OAAQ,CAAE,GAAG,EAAK,OAAQ,WAAY,GAAM,CAC7C"}

package/dist/telemetry/anomaly.d.ts

@@ -1,28 +0,0 @@
-import { TelemetryAnomalyDetectionConfig } from "./spec.js";
-import { TelemetryDispatch } from "./tracker.js";
-
-//#region src/telemetry/anomaly.d.ts
-interface TelemetryAnomalyEvent {
-  dispatch: TelemetryDispatch;
-  threshold: TelemetryAnomalyDetectionConfig;
-  metric: string;
-  value: number | undefined;
-  type: 'min' | 'max';
-}
-interface TelemetryAnomalyMonitorOptions {
-  onAnomaly?: (event: TelemetryAnomalyEvent) => void;
-  now?: () => Date;
-}
-declare class TelemetryAnomalyMonitor {
-  private readonly onAnomaly?;
-  private readonly now;
-  private readonly samples;
-  constructor(options?: TelemetryAnomalyMonitorOptions);
-  observe(dispatch: TelemetryDispatch): void;
-  private extractMetric;
-  private emit;
-  reset(): void;
-}
-//#endregion
-export { TelemetryAnomalyEvent, TelemetryAnomalyMonitor, TelemetryAnomalyMonitorOptions };
-//# sourceMappingURL=anomaly.d.ts.map

package/dist/telemetry/anomaly.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"anomaly.d.ts","names":[],"sources":["../../src/telemetry/anomaly.ts"],"sourcesContent":[],"mappings":";;;;UAGiB,qBAAA;YACL;EADK,SAAA,EAEJ,+BADD;EAOK,MAAA,EAAA,MAAA;EAKJ,KAAA,EAAA,MAAA,GAAA,SAAA;;;UALI,8BAAA;sBACK;cACR;;cAGD,uBAAA;;;;wBAKU;oBAKH"}

package/dist/telemetry/anomaly.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"anomaly.js","names":[],"sources":["../../src/telemetry/anomaly.ts"],"sourcesContent":["import type { TelemetryDispatch } from './tracker';\nimport type { TelemetryAnomalyDetectionConfig } from './spec';\n\nexport interface TelemetryAnomalyEvent {\n  dispatch: TelemetryDispatch;\n  threshold: TelemetryAnomalyDetectionConfig;\n  metric: string;\n  value: number | undefined;\n  type: 'min' | 'max';\n}\n\nexport interface TelemetryAnomalyMonitorOptions {\n  onAnomaly?: (event: TelemetryAnomalyEvent) => void;\n  now?: () => Date;\n}\n\nexport class TelemetryAnomalyMonitor {\n  private readonly onAnomaly?: (event: TelemetryAnomalyEvent) => void;\n  private readonly now: () => Date;\n  private readonly samples = new Map<string, number>();\n\n  constructor(options: TelemetryAnomalyMonitorOptions = {}) {\n    this.onAnomaly = options.onAnomaly;\n    this.now = options.now ?? (() => new Date());\n  }\n\n  observe(dispatch: TelemetryDispatch) {\n    const anomalyConfig = dispatch.definition.anomalyDetection;\n    if (!anomalyConfig?.enabled) return;\n    if (!anomalyConfig.thresholds?.length) return;\n\n    const eventKey = `${dispatch.name}.v${dispatch.version}`;\n    const count = this.samples.get(eventKey) ?? 0;\n    const newCount = count + 1;\n    this.samples.set(eventKey, newCount);\n\n    if (\n      typeof anomalyConfig.minimumSample === 'number' &&\n      newCount < anomalyConfig.minimumSample\n    ) {\n      return;\n    }\n\n    for (const threshold of anomalyConfig.thresholds) {\n      const value = this.extractMetric(dispatch, threshold.metric);\n      if (typeof value !== 'number') continue;\n      if (typeof threshold.min === 'number' && value < threshold.min) {\n        this.emit(dispatch, anomalyConfig, threshold.metric, value, 'min');\n      }\n      if (typeof threshold.max === 'number' && value > threshold.max) {\n        this.emit(dispatch, anomalyConfig, threshold.metric, value, 'max');\n      }\n    }\n  }\n\n  private extractMetric(dispatch: TelemetryDispatch, metric: string) {\n    const value = dispatch.properties[metric];\n    if (typeof value === 'number') return value;\n    if (typeof value === 'object' && value !== null && 'value' in value) {\n      const maybeNumber = (value as Record<string, unknown>).value;\n      return typeof maybeNumber === 'number' ? maybeNumber : undefined;\n    }\n    return undefined;\n  }\n\n  private emit(\n    dispatch: TelemetryDispatch,\n    threshold: TelemetryAnomalyDetectionConfig,\n    metric: string,\n    value: number,\n    type: 'min' | 'max'\n  ) {\n    this.onAnomaly?.({\n      dispatch,\n      threshold,\n      metric,\n      value,\n      type,\n    });\n  }\n\n  reset() {\n    this.samples.clear();\n  }\n}\n"],"mappings":"AAgBA,IAAa,EAAb,KAAqC,CACnC,UACA,IACA,QAA2B,IAAI,IAE/B,YAAY,EAA0C,EAAE,CAAE,CACxD,KAAK,UAAY,EAAQ,UACzB,KAAK,IAAM,EAAQ,UAAc,IAAI,MAGvC,QAAQ,EAA6B,CACnC,IAAM,EAAgB,EAAS,WAAW,iBAE1C,GADI,CAAC,GAAe,SAChB,CAAC,EAAc,YAAY,OAAQ,OAEvC,IAAM,EAAW,GAAG,EAAS,KAAK,IAAI,EAAS,UAEzC,GADQ,KAAK,QAAQ,IAAI,EAAS,EAAI,GACnB,EACzB,QAAK,QAAQ,IAAI,EAAU,EAAS,CAGlC,SAAO,EAAc,eAAkB,UACvC,EAAW,EAAc,eAK3B,IAAK,IAAM,KAAa,EAAc,WAAY,CAChD,IAAM,EAAQ,KAAK,cAAc,EAAU,EAAU,OAAO,CACxD,OAAO,GAAU,WACjB,OAAO,EAAU,KAAQ,UAAY,EAAQ,EAAU,KACzD,KAAK,KAAK,EAAU,EAAe,EAAU,OAAQ,EAAO,MAAM,CAEhE,OAAO,EAAU,KAAQ,UAAY,EAAQ,EAAU,KACzD,KAAK,KAAK,EAAU,EAAe,EAAU,OAAQ,EAAO,MAAM,GAKxE,cAAsB,EAA6B,EAAgB,CACjE,IAAM,EAAQ,EAAS,WAAW,GAClC,GAAI,OAAO,GAAU,SAAU,OAAO,EACtC,GAAI,OAAO,GAAU,UAAY,GAAkB,UAAW,EAAO,CACnE,IAAM,EAAe,EAAkC,MACvD,OAAO,OAAO,GAAgB,SAAW,EAAc,IAAA,IAK3D,KACE,EACA,EACA,EACA,EACA,EACA,CACA,KAAK,YAAY,CACf,WACA,YACA,SACA,QACA,OACD,CAAC,CAGJ,OAAQ,CACN,KAAK,QAAQ,OAAO"}

package/dist/telemetry/index.d.ts

@@ -1,4 +0,0 @@
-import { TelemetryAnomalyAction, TelemetryAnomalyDetectionConfig, TelemetryAnomalyThreshold, TelemetryConfig, TelemetryEventDef, TelemetryMeta, TelemetryPrivacyLevel, TelemetryPropertyDef, TelemetryProviderConfig, TelemetryRegistry, TelemetryRetentionConfig, TelemetrySamplingConfig, TelemetrySpec, makeTelemetryKey } from "./spec.js";
-import { TelemetryAnomalyEvent, TelemetryAnomalyMonitor, TelemetryAnomalyMonitorOptions } from "./anomaly.js";
-import { RuntimeTelemetryProvider, TelemetryDispatch, TelemetryEventContext, TelemetryTracker, TelemetryTrackerOptions } from "./tracker.js";
-export { RuntimeTelemetryProvider, TelemetryAnomalyAction, TelemetryAnomalyDetectionConfig, TelemetryAnomalyEvent, TelemetryAnomalyMonitor, TelemetryAnomalyMonitorOptions, TelemetryAnomalyThreshold, TelemetryConfig, TelemetryDispatch, TelemetryEventContext, TelemetryEventDef, TelemetryMeta, TelemetryPrivacyLevel, TelemetryPropertyDef, TelemetryProviderConfig, TelemetryRegistry, TelemetryRetentionConfig, TelemetrySamplingConfig, TelemetrySpec, TelemetryTracker, TelemetryTrackerOptions, makeTelemetryKey };

package/dist/telemetry/spec.d.ts

@@ -1,99 +0,0 @@
-import { OwnerShipMeta } from "../ownership.js";
-
-//#region src/telemetry/spec.d.ts
-type TelemetryPrivacyLevel = 'public' | 'internal' | 'pii' | 'sensitive';
-interface TelemetryMeta extends OwnerShipMeta {
-  /** Fully-qualified telemetry spec name (e.g., "sigil.core"). */
-  name: string;
-  /** Incremented when telemetry definitions change in a breaking way. */
-  version: number;
-  /** Optional domain or bounded-context hint (e.g., "onboarding"). */
-  domain: string;
-}
-interface TelemetryPropertyDef {
-  type: 'string' | 'number' | 'boolean' | 'timestamp' | 'json';
-  required?: boolean;
-  pii?: boolean;
-  redact?: boolean;
-  description?: string;
-}
-interface TelemetryAnomalyThreshold {
-  metric: string;
-  min?: number;
-  max?: number;
-}
-type TelemetryAnomalyAction = 'alert' | 'log' | 'trigger_regen';
-interface TelemetryAnomalyDetectionConfig {
-  enabled: boolean;
-  thresholds?: TelemetryAnomalyThreshold[];
-  actions?: TelemetryAnomalyAction[];
-  /**
-   * Minimum sample size before evaluating thresholds.
-   * Helps avoid false positives on small sample sizes.
-   */
-  minimumSample?: number;
-}
-interface TelemetrySamplingConfig {
-  rate: number;
-  conditions?: string[];
-}
-interface TelemetryRetentionConfig {
-  days: number;
-  policy?: 'archive' | 'delete';
-}
-interface TelemetryEventDef {
-  /** Name of the event (should match EventSpec.name for cross-reference). */
-  name: string;
-  /** Version of the underlying event. */
-  version: number;
-  /** High-level semantics for docs/analyzers. */
-  semantics: {
-    who?: string;
-    what: string;
-    why?: string;
-  };
-  /** Detailed property metadata keyed by property name. */
-  properties: Record<string, TelemetryPropertyDef>;
-  /** Privacy level for the entire event. */
-  privacy: TelemetryPrivacyLevel;
-  /** Retention policy overrides. */
-  retention?: TelemetryRetentionConfig;
-  /** Sampling rules, defaulting to spec.config defaults. */
-  sampling?: TelemetrySamplingConfig;
-  /** Anomaly detection overrides. */
-  anomalyDetection?: TelemetryAnomalyDetectionConfig;
-  /** Optional tags for analytics/AI hints. */
-  tags?: string[];
-}
-interface TelemetryProviderConfig {
-  type: 'posthog' | 'segment' | 'opentelemetry' | 'internal';
-  config: Record<string, unknown>;
-}
-interface TelemetryConfig {
-  defaultRetentionDays?: number;
-  defaultSamplingRate?: number;
-  providers?: TelemetryProviderConfig[];
-  anomalyDetection?: {
-    enabled: boolean;
-    checkIntervalMs?: number;
-  };
-}
-interface TelemetrySpec {
-  meta: TelemetryMeta;
-  events: TelemetryEventDef[];
-  config?: TelemetryConfig;
-}
-declare class TelemetryRegistry {
-  private readonly items;
-  private readonly eventsByKey;
-  private readonly specByEventKey;
-  register(spec: TelemetrySpec): this;
-  list(): TelemetrySpec[];
-  get(name: string, version?: number): TelemetrySpec | undefined;
-  findEventDef(name: string, version?: number): TelemetryEventDef | undefined;
-  getSpecForEvent(name: string, version?: number): TelemetrySpec | undefined;
-}
-declare function makeTelemetryKey(meta: TelemetryMeta): string;
-//#endregion
-export { TelemetryAnomalyAction, TelemetryAnomalyDetectionConfig, TelemetryAnomalyThreshold, TelemetryConfig, TelemetryEventDef, TelemetryMeta, TelemetryPrivacyLevel, TelemetryPropertyDef, TelemetryProviderConfig, TelemetryRegistry, TelemetryRetentionConfig, TelemetrySamplingConfig, TelemetrySpec, makeTelemetryKey };
-//# sourceMappingURL=spec.d.ts.map

package/dist/telemetry/spec.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"spec.d.ts","names":[],"sources":["../../src/telemetry/spec.ts"],"sourcesContent":[],"mappings":";;;KAGY,qBAAA;UAEK,aAAA,SAAsB;EAF3B;EAEK,IAAA,EAAA,MAAA;EASA;EAQA,OAAA,EAAA,MAAA;EAML;EAEK,MAAA,EAAA,MAAA;AAWjB;AAKiB,UAhCA,oBAAA,CAgCwB;EAKxB,IAAA,EAAA,QAAA,GAAA,QAAiB,GAAA,SAAA,GAAA,WAAA,GAAA,MAAA;EAYL,QAAA,CAAA,EAAA,OAAA;EAAf,GAAA,CAAA,EAAA,OAAA;EAEH,MAAA,CAAA,EAAA,OAAA;EAEG,WAAA,CAAA,EAAA,MAAA;;AAIO,UAjDJ,yBAAA,CAiDI;EAA+B,MAAA,EAAA,MAAA;EAKnC,GAAA,CAAA,EAAA,MAAA;EAKA,GAAA,CAAA,EAAA,MAAA;AAUjB;AACQ,KAhEI,sBAAA,GAgEJ,OAAA,GAAA,KAAA,GAAA,eAAA;AACE,UA/DO,+BAAA,CA+DP;EACC,OAAA,EAAA,OAAA;EAAe,UAAA,CAAA,EA9DX,yBA8DW,EAAA;EAKb,OAAA,CAAA,EAlED,sBAkEkB,EAAA;EAKb;;;;EAmDkC,aAAA,CAAA,EAAA,MAAA;;AAmBnC,UArIC,uBAAA,CAqIsB;;;;UAhItB,wBAAA;;;;UAKA,iBAAA;;;;;;;;;;;;cAYH,eAAe;;WAElB;;cAEG;;aAED;;qBAEQ;;;;UAKJ,uBAAA;;UAEP;;UAGO,eAAA;;;cAGH;;;;;;UAOG,aAAA;QACT;UACE;WACC;;cAKE,iBAAA;;;;iBAKI;UAaP;uCAI6B;gDAgBS;mDAkBG;;iBAmBnC,gBAAA,OAAuB"}

package/dist/telemetry/spec.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"spec.js","names":["latest: TelemetrySpec | undefined","latest: TelemetryEventDef | undefined"],"sources":["../../src/telemetry/spec.ts"],"sourcesContent":["import type { OwnerShipMeta } from '../ownership';\nimport type { EventKey } from '../events';\n\nexport type TelemetryPrivacyLevel = 'public' | 'internal' | 'pii' | 'sensitive';\n\nexport interface TelemetryMeta extends OwnerShipMeta {\n  /** Fully-qualified telemetry spec name (e.g., \"sigil.core\"). */\n  name: string;\n  /** Incremented when telemetry definitions change in a breaking way. */\n  version: number;\n  /** Optional domain or bounded-context hint (e.g., \"onboarding\"). */\n  domain: string;\n}\n\nexport interface TelemetryPropertyDef {\n  type: 'string' | 'number' | 'boolean' | 'timestamp' | 'json';\n  required?: boolean;\n  pii?: boolean;\n  redact?: boolean;\n  description?: string;\n}\n\nexport interface TelemetryAnomalyThreshold {\n  metric: string;\n  min?: number;\n  max?: number;\n}\n\nexport type TelemetryAnomalyAction = 'alert' | 'log' | 'trigger_regen';\n\nexport interface TelemetryAnomalyDetectionConfig {\n  enabled: boolean;\n  thresholds?: TelemetryAnomalyThreshold[];\n  actions?: TelemetryAnomalyAction[];\n  /**\n   * Minimum sample size before evaluating thresholds.\n   * Helps avoid false positives on small sample sizes.\n   */\n  minimumSample?: number;\n}\n\nexport interface TelemetrySamplingConfig {\n  rate: number;\n  conditions?: string[];\n}\n\nexport interface TelemetryRetentionConfig {\n  days: number;\n  policy?: 'archive' | 'delete';\n}\n\nexport interface TelemetryEventDef {\n  /** Name of the event (should match EventSpec.name for cross-reference). */\n  name: string;\n  /** Version of the underlying event. */\n  version: number;\n  /** High-level semantics for docs/analyzers. */\n  semantics: {\n    who?: string;\n    what: string;\n    why?: string;\n  };\n  /** Detailed property metadata keyed by property name. */\n  properties: Record<string, TelemetryPropertyDef>;\n  /** Privacy level for the entire event. */\n  privacy: TelemetryPrivacyLevel;\n  /** Retention policy overrides. */\n  retention?: TelemetryRetentionConfig;\n  /** Sampling rules, defaulting to spec.config defaults. */\n  sampling?: TelemetrySamplingConfig;\n  /** Anomaly detection overrides. */\n  anomalyDetection?: TelemetryAnomalyDetectionConfig;\n  /** Optional tags for analytics/AI hints. */\n  tags?: string[];\n}\n\nexport interface TelemetryProviderConfig {\n  type: 'posthog' | 'segment' | 'opentelemetry' | 'internal';\n  config: Record<string, unknown>;\n}\n\nexport interface TelemetryConfig {\n  defaultRetentionDays?: number;\n  defaultSamplingRate?: number;\n  providers?: TelemetryProviderConfig[];\n  anomalyDetection?: {\n    enabled: boolean;\n    checkIntervalMs?: number;\n  };\n}\n\nexport interface TelemetrySpec {\n  meta: TelemetryMeta;\n  events: TelemetryEventDef[];\n  config?: TelemetryConfig;\n}\n\nconst telemetryKey = (meta: TelemetryMeta) => `${meta.name}.v${meta.version}`;\n\nexport class TelemetryRegistry {\n  private readonly items = new Map<string, TelemetrySpec>();\n  private readonly eventsByKey = new Map<EventKey, TelemetryEventDef>();\n  private readonly specByEventKey = new Map<EventKey, TelemetrySpec>();\n\n  register(spec: TelemetrySpec): this {\n    const key = telemetryKey(spec.meta);\n    if (this.items.has(key)) {\n      throw new Error(`Duplicate TelemetrySpec registration for ${key}`);\n    }\n    this.items.set(key, spec);\n    for (const event of spec.events) {\n      this.eventsByKey.set(`${event.name}.v${event.version}`, event);\n      this.specByEventKey.set(`${event.name}.v${event.version}`, spec);\n    }\n    return this;\n  }\n\n  list(): TelemetrySpec[] {\n    return [...this.items.values()];\n  }\n\n  get(name: string, version?: number): TelemetrySpec | undefined {\n    if (version != null) {\n      return this.items.get(`${name}.v${version}`);\n    }\n    let latest: TelemetrySpec | undefined;\n    let maxVersion = -Infinity;\n    for (const item of this.items.values()) {\n      if (item.meta.name !== name) continue;\n      if (item.meta.version > maxVersion) {\n        maxVersion = item.meta.version;\n        latest = item;\n      }\n    }\n    return latest;\n  }\n\n  findEventDef(name: string, version?: number): TelemetryEventDef | undefined {\n    if (version != null) {\n      return this.eventsByKey.get(`${name}.v${version}`);\n    }\n    let latest: TelemetryEventDef | undefined;\n    let maxVersion = -Infinity;\n    for (const [key, event] of this.eventsByKey.entries()) {\n      const [eventName, versionPart] = key.split('.v');\n      if (eventName !== name) continue;\n      const ver = Number(versionPart);\n      if (Number.isFinite(ver) && ver > maxVersion) {\n        maxVersion = ver;\n        latest = event;\n      }\n    }\n    return latest;\n  }\n\n  getSpecForEvent(name: string, version?: number): TelemetrySpec | undefined {\n    if (version != null) {\n      return this.specByEventKey.get(`${name}.v${version}`);\n    }\n    let latest: TelemetrySpec | undefined;\n    let maxVersion = -Infinity;\n    for (const [key, spec] of this.specByEventKey.entries()) {\n      const [eventName, versionPart] = key.split('.v');\n      if (eventName !== name) continue;\n      const ver = Number(versionPart);\n      if (Number.isFinite(ver) && ver > maxVersion) {\n        maxVersion = ver;\n        latest = spec;\n      }\n    }\n    return latest;\n  }\n}\n\nexport function makeTelemetryKey(meta: TelemetryMeta) {\n  return telemetryKey(meta);\n}\n"],"mappings":"AAiGA,MAAM,EAAgB,GAAwB,GAAG,EAAK,KAAK,IAAI,EAAK,UAEpE,IAAa,EAAb,KAA+B,CAC7B,MAAyB,IAAI,IAC7B,YAA+B,IAAI,IACnC,eAAkC,IAAI,IAEtC,SAAS,EAA2B,CAClC,IAAM,EAAM,EAAa,EAAK,KAAK,CACnC,GAAI,KAAK,MAAM,IAAI,EAAI,CACrB,MAAU,MAAM,4CAA4C,IAAM,CAEpE,KAAK,MAAM,IAAI,EAAK,EAAK,CACzB,IAAK,IAAM,KAAS,EAAK,OACvB,KAAK,YAAY,IAAI,GAAG,EAAM,KAAK,IAAI,EAAM,UAAW,EAAM,CAC9D,KAAK,eAAe,IAAI,GAAG,EAAM,KAAK,IAAI,EAAM,UAAW,EAAK,CAElE,OAAO,KAGT,MAAwB,CACtB,MAAO,CAAC,GAAG,KAAK,MAAM,QAAQ,CAAC,CAGjC,IAAI,EAAc,EAA6C,CAC7D,GAAI,GAAW,KACb,OAAO,KAAK,MAAM,IAAI,GAAG,EAAK,IAAI,IAAU,CAE9C,IAAIA,EACA,EAAa,KACjB,IAAK,IAAM,KAAQ,KAAK,MAAM,QAAQ,CAChC,EAAK,KAAK,OAAS,GACnB,EAAK,KAAK,QAAU,IACtB,EAAa,EAAK,KAAK,QACvB,EAAS,GAGb,OAAO,EAGT,aAAa,EAAc,EAAiD,CAC1E,GAAI,GAAW,KACb,OAAO,KAAK,YAAY,IAAI,GAAG,EAAK,IAAI,IAAU,CAEpD,IAAIC,EACA,EAAa,KACjB,IAAK,GAAM,CAAC,EAAK,KAAU,KAAK,YAAY,SAAS,CAAE,CACrD,GAAM,CAAC,EAAW,GAAe,EAAI,MAAM,KAAK,CAChD,GAAI,IAAc,EAAM,SACxB,IAAM,EAAM,OAAO,EAAY,CAC3B,OAAO,SAAS,EAAI,EAAI,EAAM,IAChC,EAAa,EACb,EAAS,GAGb,OAAO,EAGT,gBAAgB,EAAc,EAA6C,CACzE,GAAI,GAAW,KACb,OAAO,KAAK,eAAe,IAAI,GAAG,EAAK,IAAI,IAAU,CAEvD,IAAID,EACA,EAAa,KACjB,IAAK,GAAM,CAAC,EAAK,KAAS,KAAK,eAAe,SAAS,CAAE,CACvD,GAAM,CAAC,EAAW,GAAe,EAAI,MAAM,KAAK,CAChD,GAAI,IAAc,EAAM,SACxB,IAAM,EAAM,OAAO,EAAY,CAC3B,OAAO,SAAS,EAAI,EAAI,EAAM,IAChC,EAAa,EACb,EAAS,GAGb,OAAO,IAIX,SAAgB,EAAiB,EAAqB,CACpD,OAAO,EAAa,EAAK"}

package/dist/telemetry/tracker.d.ts

@@ -1,52 +0,0 @@
-import { TelemetryEventDef, TelemetryRegistry, TelemetrySpec } from "./spec.js";
-import { TelemetryAnomalyMonitor } from "./anomaly.js";
-
-//#region src/telemetry/tracker.d.ts
-interface TelemetryEventContext {
-  tenantId?: string;
-  organizationId?: string | null;
-  userId?: string | null;
-  sessionId?: string | null;
-  actor?: 'anonymous' | 'user' | 'admin';
-  channel?: 'web' | 'mobile' | 'job' | 'agent';
-  metadata?: Record<string, unknown>;
-}
-interface TelemetryDispatch {
-  id: string;
-  name: string;
-  version: number;
-  occurredAt: string;
-  properties: Record<string, unknown>;
-  privacy: TelemetryEventDef['privacy'];
-  context: TelemetryEventContext;
-  tags?: string[];
-  spec: TelemetrySpec;
-  definition: TelemetryEventDef;
-}
-interface RuntimeTelemetryProvider {
-  id: string;
-  send(event: TelemetryDispatch): Promise<void>;
-}
-interface TelemetryTrackerOptions {
-  registry: TelemetryRegistry;
-  providers?: RuntimeTelemetryProvider[];
-  anomalyMonitor?: TelemetryAnomalyMonitor;
-  random?: () => number;
-  clock?: () => Date;
-}
-declare class TelemetryTracker {
-  private readonly providers;
-  private readonly registry;
-  private readonly anomalyMonitor?;
-  private readonly random;
-  private readonly clock;
-  constructor(options: TelemetryTrackerOptions);
-  registerProvider(provider: RuntimeTelemetryProvider): void;
-  unregisterProvider(providerId: string): void;
-  track(name: string, version: number, properties: Record<string, unknown>, context?: TelemetryEventContext): Promise<boolean>;
-  private shouldSample;
-  private redactProperties;
-}
-//#endregion
-export { RuntimeTelemetryProvider, TelemetryDispatch, TelemetryEventContext, TelemetryTracker, TelemetryTrackerOptions };
-//# sourceMappingURL=tracker.d.ts.map

package/dist/telemetry/tracker.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"tracker.d.ts","names":[],"sources":["../../src/telemetry/tracker.ts"],"sourcesContent":[],"mappings":";;;;UASiB,qBAAA;;EAAA,cAAA,CAAA,EAAA,MAAA,GAAqB,IAAA;EAUrB,MAAA,CAAA,EAAA,MAAA,GAAA,IAAiB;EAKpB,SAAA,CAAA,EAAA,MAAA,GAAA,IAAA;EACH,KAAA,CAAA,EAAA,WAAA,GAAA,MAAA,GAAA,OAAA;EACA,OAAA,CAAA,EAAA,KAAA,GAAA,QAAA,GAAA,KAAA,GAAA,OAAA;EAEH,QAAA,CAAA,EAZK,MAYL,CAAA,MAAA,EAAA,OAAA,CAAA;;AACuB,UAVd,iBAAA,CAUc;EAGd,EAAA,EAAA,MAAA;EAKA,IAAA,EAAA,MAAA;EACL,OAAA,EAAA,MAAA;EACE,UAAA,EAAA,MAAA;EACK,UAAA,EAhBL,MAgBK,CAAA,MAAA,EAAA,OAAA,CAAA;EAEH,OAAA,EAjBL,iBAiBK,CAAA,SAAA,CAAA;EAAI,OAAA,EAhBT,qBAgBS;EAoBP,IAAA,CAAA,EAAA,MAAA,EAAA;EAOU,IAAA,EAzCf,aAyCe;EAWM,UAAA,EAnDf,iBAmDe;;AAYhB,UA5DI,wBAAA,CA4DJ;EACR,EAAA,EAAA,MAAA;EAAO,IAAA,CAAA,KAAA,EA3DE,iBA2DF,CAAA,EA3DsB,OA2DtB,CAAA,IAAA,CAAA;;UAxDK,uBAAA;YACL;cACE;mBACK;;gBAEH;;cAoBH,gBAAA;;;;;;uBAOU;6BAWM;;mDAWb,mCACH,wBACR"}

package/dist/telemetry/tracker.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"tracker.js","names":["dispatch: TelemetryDispatch","result: Record<string, unknown>"],"sources":["../../src/telemetry/tracker.ts"],"sourcesContent":["import { randomUUID } from 'crypto';\nimport type { TelemetryAnomalyMonitor } from './anomaly';\nimport type {\n  TelemetryEventDef,\n  TelemetryRegistry,\n  TelemetrySamplingConfig,\n  TelemetrySpec,\n} from './spec';\n\nexport interface TelemetryEventContext {\n  tenantId?: string;\n  organizationId?: string | null;\n  userId?: string | null;\n  sessionId?: string | null;\n  actor?: 'anonymous' | 'user' | 'admin';\n  channel?: 'web' | 'mobile' | 'job' | 'agent';\n  metadata?: Record<string, unknown>;\n}\n\nexport interface TelemetryDispatch {\n  id: string;\n  name: string;\n  version: number;\n  occurredAt: string;\n  properties: Record<string, unknown>;\n  privacy: TelemetryEventDef['privacy'];\n  context: TelemetryEventContext;\n  tags?: string[];\n  spec: TelemetrySpec;\n  definition: TelemetryEventDef;\n}\n\nexport interface RuntimeTelemetryProvider {\n  id: string;\n  send(event: TelemetryDispatch): Promise<void>;\n}\n\nexport interface TelemetryTrackerOptions {\n  registry: TelemetryRegistry;\n  providers?: RuntimeTelemetryProvider[];\n  anomalyMonitor?: TelemetryAnomalyMonitor;\n  random?: () => number;\n  clock?: () => Date;\n}\n\nconst maskValue = (value: unknown) => {\n  if (value == null) return value;\n  if (typeof value === 'string') return 'REDACTED';\n  if (typeof value === 'number') return 0;\n  if (typeof value === 'boolean') return false;\n  if (Array.isArray(value)) return value.map(() => 'REDACTED');\n  if (typeof value === 'object') {\n    return Object.fromEntries(\n      Object.keys(value as Record<string, unknown>).map((key) => [\n        key,\n        'REDACTED',\n      ])\n    );\n  }\n  return 'REDACTED';\n};\n\nexport class TelemetryTracker {\n  private readonly providers = new Map<string, RuntimeTelemetryProvider>();\n  private readonly registry: TelemetryRegistry;\n  private readonly anomalyMonitor?: TelemetryAnomalyMonitor;\n  private readonly random: () => number;\n  private readonly clock: () => Date;\n\n  constructor(options: TelemetryTrackerOptions) {\n    this.registry = options.registry;\n    this.anomalyMonitor = options.anomalyMonitor;\n    this.random = options.random ?? Math.random;\n    this.clock = options.clock ?? (() => new Date());\n\n    for (const provider of options.providers ?? []) {\n      this.providers.set(provider.id, provider);\n    }\n  }\n\n  registerProvider(provider: RuntimeTelemetryProvider) {\n    this.providers.set(provider.id, provider);\n  }\n\n  unregisterProvider(providerId: string) {\n    this.providers.delete(providerId);\n  }\n\n  async track(\n    name: string,\n    version: number,\n    properties: Record<string, unknown>,\n    context: TelemetryEventContext = {}\n  ): Promise<boolean> {\n    const definition = this.registry.findEventDef(name, version);\n    if (!definition) return false;\n\n    const spec = this.registry.getSpecForEvent(\n      definition.name,\n      definition.version\n    );\n    if (!spec) return false;\n\n    if (\n      !this.shouldSample(\n        definition.sampling ?? spec.config?.defaultSamplingRate\n      )\n    ) {\n      return false;\n    }\n\n    const redactedProperties = this.redactProperties(definition, properties);\n    const dispatch: TelemetryDispatch = {\n      id: randomUUID(),\n      name: definition.name,\n      version: definition.version,\n      occurredAt: this.clock().toISOString(),\n      properties: redactedProperties,\n      privacy: definition.privacy,\n      context,\n      tags: definition.tags,\n      spec,\n      definition,\n    };\n\n    await Promise.all(\n      [...this.providers.values()].map((provider) => provider.send(dispatch))\n    );\n\n    this.anomalyMonitor?.observe(dispatch);\n    return true;\n  }\n\n  private shouldSample(\n    sampling: TelemetrySamplingConfig | number | undefined\n  ): boolean {\n    if (typeof sampling === 'number') {\n      return this.random() < sampling;\n    }\n    if (!sampling) return true;\n    return this.random() < sampling.rate;\n  }\n\n  private redactProperties(\n    definition: TelemetryEventDef,\n    properties: Record<string, unknown>\n  ): Record<string, unknown> {\n    const result: Record<string, unknown> = {};\n    for (const [key, value] of Object.entries(properties)) {\n      const def = definition.properties[key];\n      if (!def) {\n        result[key] = value;\n        continue;\n      }\n      if (def.redact || def.pii || definition.privacy === 'sensitive') {\n        result[key] = maskValue(value);\n      } else {\n        result[key] = value;\n      }\n    }\n    return result;\n  }\n}\n"],"mappings":"oCA6CA,MAAM,EAAa,GACb,GAAS,KAAa,EACtB,OAAO,GAAU,SAAiB,WAClC,OAAO,GAAU,SAAiB,EAClC,OAAO,GAAU,UAAkB,GACnC,MAAM,QAAQ,EAAM,CAAS,EAAM,QAAU,WAAW,CACxD,OAAO,GAAU,SACZ,OAAO,YACZ,OAAO,KAAK,EAAiC,CAAC,IAAK,GAAQ,CACzD,EACA,WACD,CAAC,CACH,CAEI,WAGT,IAAa,EAAb,KAA8B,CAC5B,UAA6B,IAAI,IACjC,SACA,eACA,OACA,MAEA,YAAY,EAAkC,CAC5C,KAAK,SAAW,EAAQ,SACxB,KAAK,eAAiB,EAAQ,eAC9B,KAAK,OAAS,EAAQ,QAAU,KAAK,OACrC,KAAK,MAAQ,EAAQ,YAAgB,IAAI,MAEzC,IAAK,IAAM,KAAY,EAAQ,WAAa,EAAE,CAC5C,KAAK,UAAU,IAAI,EAAS,GAAI,EAAS,CAI7C,iBAAiB,EAAoC,CACnD,KAAK,UAAU,IAAI,EAAS,GAAI,EAAS,CAG3C,mBAAmB,EAAoB,CACrC,KAAK,UAAU,OAAO,EAAW,CAGnC,MAAM,MACJ,EACA,EACA,EACA,EAAiC,EAAE,CACjB,CAClB,IAAM,EAAa,KAAK,SAAS,aAAa,EAAM,EAAQ,CAC5D,GAAI,CAAC,EAAY,MAAO,GAExB,IAAM,EAAO,KAAK,SAAS,gBACzB,EAAW,KACX,EAAW,QACZ,CAGD,GAFI,CAAC,GAGH,CAAC,KAAK,aACJ,EAAW,UAAY,EAAK,QAAQ,oBACrC,CAED,MAAO,GAGT,IAAM,EAAqB,KAAK,iBAAiB,EAAY,EAAW,CAClEA,EAA8B,CAClC,GAAI,GAAY,CAChB,KAAM,EAAW,KACjB,QAAS,EAAW,QACpB,WAAY,KAAK,OAAO,CAAC,aAAa,CACtC,WAAY,EACZ,QAAS,EAAW,QACpB,UACA,KAAM,EAAW,KACjB,OACA,aACD,CAOD,OALA,MAAM,QAAQ,IACZ,CAAC,GAAG,KAAK,UAAU,QAAQ,CAAC,CAAC,IAAK,GAAa,EAAS,KAAK,EAAS,CAAC,CACxE,CAED,KAAK,gBAAgB,QAAQ,EAAS,CAC/B,GAGT,aACE,EACS,CAKT,OAJI,OAAO,GAAa,SACf,KAAK,QAAQ,CAAG,EAEpB,EACE,KAAK,QAAQ,CAAG,EAAS,KADV,GAIxB,iBACE,EACA,EACyB,CACzB,IAAMC,EAAkC,EAAE,CAC1C,IAAK,GAAM,CAAC,EAAK,KAAU,OAAO,QAAQ,EAAW,CAAE,CACrD,IAAM,EAAM,EAAW,WAAW,GAClC,GAAI,CAAC,EAAK,CACR,EAAO,GAAO,EACd,SAEE,EAAI,QAAU,EAAI,KAAO,EAAW,UAAY,YAClD,EAAO,GAAO,EAAU,EAAM,CAE9B,EAAO,GAAO,EAGlB,OAAO"}

package/dist/tests/index.d.ts

@@ -1,3 +0,0 @@
-import { Action, Assertion, CoverageRequirement, ExpectErrorAssertion, ExpectEventsAssertion, ExpectOutputAssertion, ExpectedEvent, Fixture, OperationTargetRef, TestRegistry, TestScenario, TestSpec, TestSpecMeta, TestSpecRef, TestTarget, WorkflowTargetRef, makeTestKey } from "./spec.js";
-import { AssertionResult, ScenarioRunResult, TestRunResult, TestRunner, TestRunnerConfig } from "./runner.js";
-export { Action, Assertion, AssertionResult, CoverageRequirement, ExpectErrorAssertion, ExpectEventsAssertion, ExpectOutputAssertion, ExpectedEvent, Fixture, OperationTargetRef, ScenarioRunResult, TestRegistry, TestRunResult, TestRunner, TestRunnerConfig, TestScenario, TestSpec, TestSpecMeta, TestSpecRef, TestTarget, WorkflowTargetRef, makeTestKey };

package/dist/tests/runner.d.ts

@@ -1,44 +0,0 @@
-import { Assertion, TestScenario, TestSpec } from "./spec.js";
-import { HandlerCtx } from "../types.js";
-import { SpecRegistry } from "../registry.js";
-import "../index.js";
-
-//#region src/tests/runner.d.ts
-interface ScenarioRunResult {
-  scenario: TestScenario;
-  status: 'passed' | 'failed';
-  error?: Error;
-  assertionResults: AssertionResult[];
-}
-interface AssertionResult {
-  assertion: Assertion;
-  status: 'passed' | 'failed';
-  message?: string;
-}
-interface TestRunResult {
-  spec: TestSpec;
-  scenarios: ScenarioRunResult[];
-  passed: number;
-  failed: number;
-}
-interface TestRunnerConfig {
-  registry: SpecRegistry;
-  createContext?: () => HandlerCtx | Promise<HandlerCtx>;
-  beforeEach?: (scenario: TestScenario) => void | Promise<void>;
-  afterEach?: (scenario: TestScenario, result: ScenarioRunResult) => void | Promise<void>;
-}
-declare class TestRunner {
-  private readonly config;
-  constructor(config: TestRunnerConfig);
-  run(spec: TestSpec): Promise<TestRunResult>;
-  private runScenario;
-  private createContext;
-  private executeOperation;
-  private evaluateAssertion;
-  private evaluateOutputAssertion;
-  private evaluateErrorAssertion;
-  private evaluateEventsAssertion;
-}
-//#endregion
-export { AssertionResult, ScenarioRunResult, TestRunResult, TestRunner, TestRunnerConfig };
-//# sourceMappingURL=runner.d.ts.map

package/dist/tests/runner.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"runner.d.ts","names":[],"sources":["../../src/tests/runner.ts"],"sourcesContent":[],"mappings":";;;;;;UAciB,iBAAA;YACL;;EADK,KAAA,CAAA,EAGP,KAHO;EACL,gBAAA,EAGQ,eAHR,EAAA;;AAGQ,UAGH,eAAA,CAHG;EAAe,SAAA,EAItB,SAJsB;EAGlB,MAAA,EAAA,QAAA,GAAe,QAAA;EAMf,OAAA,CAAA,EAAA,MAAa;AAO9B;AACY,UARK,aAAA,CAQL;EACY,IAAA,EARhB,QAQgB;EAAqB,SAAA,EAPhC,iBAOgC,EAAA;EAAR,MAAA,EAAA,MAAA;EACX,MAAA,EAAA,MAAA;;AAEZ,UALG,gBAAA,CAKH;EACF,QAAA,EALA,YAKA;EACE,aAAA,CAAA,EAAA,GAAA,GALU,UAKV,GALuB,OAKvB,CAL+B,UAK/B,CAAA;EAAO,UAAA,CAAA,EAAA,CAAA,QAAA,EAJK,YAIL,EAAA,GAAA,IAAA,GAJ6B,OAI7B,CAAA,IAAA,CAAA;EAeR,SAAA,CAAA,EAAA,CAAU,QAAA,EAjBT,YAiBS,EAAA,MAAA,EAhBX,iBAgBW,EAAA,GAAA,IAAA,GAfT,OAeS,CAAA,IAAA,CAAA;;AAGL,cAHL,UAAA,CAGK;EAAmB,iBAAA,MAAA;EAAR,WAAA,CAAA,MAAA,EAFU,gBAEV;EAAO,GAAA,CAAA,IAAA,EAAlB,QAAkB,CAAA,EAAP,OAAO,CAAC,aAAD,CAAA"}